Overview

The Procyon benchmark UI is built using Java and Java does not use the operating system’s certificate store by default. Instead, it relies on its own internal certificate trust store known as:

cacerts 
 
When running the UL Procyon suite, users may encounter connectivity or activation issues in environments where SSL inspection (HTTPS inspection) is enabled. 

Key Implication

  • Custom certificates installed at the OS level (e.g., corporate SSL inspection certificates) are not automatically trusted by Java applications.
  • Additionally, many systems are configured such that Java does not trust certificates present in the default cacerts store unless explicitly modified.

As a result, SSL inspection can break secure communication required for:

  • Benchmark activation
  • Application self-updates
  • Online services used by Procyon

Recommended Solutions

Option 1: Bypass SSL Inspection

Configure your network or security appliance to exclude Procyon-related traffic from SSL inspection.

Considerations

  • Requires coordination with IT/security teams
  • Identify and whitelist required domains
    • *.3dmark.com for activation and online result storage
    • d185e6x7bpocy0.cloudfront.net for application self-update


Option 2: Import Corporate Certificate into Java cacerts

Manually add your organization’s SSL inspection root certificate into the Java trust store used by Procyon.

Steps

  1. Locate the Java cacerts file, located at, assuming default installation:  
    C:\Program Files\UL\Procyon\jre\lib\security\cacerts
  2. Import your certificate using the Java keytool utility: keytool -importcert -trustcacerts \ 
      -alias your_cert_alias \ 
      -file your_certificate.crt \ 
      -keystore cacerts
  3. You will be prompted for the password. The default password for the cacerts file is changeit 

Considerations

  • This modified cacerts file must be applied after: 
    • Every installation
    • Every update/reinstallation
  • Requires administrative privileges


Option 3: Use an Offline / Site License

Use a site license that does not require online activation.

Considerations

  • Requires appropriate license agreement with UL